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DETAILED ACTION 

1. Claims 1-2, 5, 8, 11, 14 and 19 have been examined. 

2. A Request for Continued Examination under 37 CFR 1.114, including the 
fee set forth in 37 CFR 1 .17(e), was filed in this application after final rejection. 
Since this application is eligible for continued examination under 37 CFR 1.114, and 
the fee set forth in 37 CFR 1 .1 7(e) has been timely paid, the finality of the previous 
office action has been withdrawn pursuant to 37 CFR 1 .1 14. Applicant's submission 
filed on 1 August 2008 has been entered. 

Election/Restrictions 

3. Applicant's election without traverse of electing Species I (Claims 1-2, 5, 
8, 11, 14 and 19), in the reply filed on 6 November 2008 is acknowledged. 

Applicant also authorizes the examiner to cancel the non-elected Species 
2 (claims 20-24) and Species 3 (claims 27 and 29-33). [See Remark dated 06 
November 2008] 

Response to Amendment/Argument 

4. As a result of the amendment, claims 1 -2, 5, 8, 1 1 , 1 4, 20-24, 27 and 29- 
33 are amended. Claims 3-4, 6-7, 9-10, 12-13, 15-18, 25-26, 28 and 34-36 are 
canceled. 

5. Applicant's amendments and argument have been fully considered, but 
are moot in view of new ground rejection as set forth below. It is noted that 
Applicant's arguments are directed towards limitations newly added via 
amendments. 
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6. Any objection/rejection not repeated below is withdrawn due to Applicant's 
amendment. 

Claim Objections 

7. Claims 11,14 and 1 9 are objected to because of the following informalities: 

In line 2 of claims 1 1 and line 1 of claim 14, line 1 , "comprising the steps 
of" should be changed to - comprising steps -- in order to provide proper antecedent 
basis for this recitation in the preamble. Further, in steps (d) and (e) of claim 14, "to 
produce the signature for the set of data; and storing the signature" should be 
changed to - to produce a signature for the set of data ; and storing the signature 
for the set of data - in order to better clarify the claim limitation. 

In claim 19, line 2, "carrying out the steps of Claim 1 " should be changed 
to - carrying out the method of Claim 1 - in order to provide proper antecedent basis 
for this recitation. 

Claim Rejections - 35 USC § 103 

8. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

9. The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1, 148 
USPQ 459 (1966), that are applied for establishing a background for determining 
obviousness under 35 U.S.C. 103(a) are summarized as follows: 
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1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness or nonobviousness. 

10. Claims 1-2, 5, 8 and 19 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Bowe et al. (U.S. Pub. No. 2003/0093678) in view of Jackson et al. 
(U.S. Patent No. 7,116,782). 

As per claim 1, Bowe et al. discloses a method, comprising: 

(a) the client (e.g. client 100 in fig. 2) sending first data related 
information (e.g. data object 210 in fig. 2) to a server (e.g. server 120 in fig. 2) for 
signature computation (A user/client sends a data object to the server and the server 
generates a digital signature for the data object - e.g. step 210 in fig. 2, abstract, 
paragraph [0035] and [0054]. Please note data object corresponds to Applicant's 
first data related information); 

(b) the server, comprising a second computing device (e.g. server 120 
in fig. 2), computing a signature for the first data related information by utilizing a 
secure signing algorithm and a key that is only known and available for use by the 
server (The server generates by performing a hash function and maintains all of the 
user's keys used for producing a digital signature and the server generates a digital 
signature for the data object using the private key stored at the server - step 225 in 
fig. 2, abstract, paragraph [0037]. Please note user's keys generated and 
maintained by the server correspond to Applicant's a key that is only known and 
available for the use by the server and as evidenced by fig. 4 and paragraph [0061] 
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that keys to generate a verifying hash are only known and available for use by the 
server ); 

(c) the server sending the signature to the client (the server then sends 
the digital signature to the client - e.g. abstract, paragraph [0035] ); 

(e) before the data that were stored are subsequently used by the 
client, the client sending both second data related information and the signature to 
the server to verify that the data that were stored have not been changed (A client 
can, at a later time, send the signature back to the server for verification - e.g. step 
verification request & Singed Object in fig. 3, abstract, paragraph [0036] and [0060]); 

(f) the server generating a temporary signature of the second data 
related information (e.g. second hash 310 in fig. 3 and step of server generates 
second hash in fig. 3) by utilizing the secure signing algorithm (e.g. hash function in 
paragraph [0054] and verifying step using a predetermined hash function - claims 19 
and 43) and the key that is only known and available for use by the server (e.g. 
verifying step using the private key to generate a comparison value - e.g. claims 19 
and 43, par. [0061] and fig. 4); 

(g) the server comparing the temporary signature to the stored 
signature (The server generates a second hash using the original data object and 
compares the hash from the signature with the second hash - e.g. step server 
compares hashes in fig. 3, paragraph [0040] and [0060]); 

(h) when the temporary signature is equal to the stored signature, 
sending a positive result to the client (If the hash values match, the server generates 
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a "valid" verification response, which it sends to the client - e.g. success indicator in 
fig. 3, paragraph [0040] and [0060]); 

(i) when the temporary signature is not equal to the stored signature, 
sending a negative result to the client (The server returns an indicator showing the 
status of the signature, either valid or invalid - e.g. failure indicator in fig. 3 and 
paragraph [0060]);. 

(j) the client receiving the result from the server (client receives 
success/failure indicator from server -e.g. fig. 3); 

Although Bowe et al. discloses the server then sends the digital signature 
to the client - e.g. abstract and paragraph [0035], a client, at a later time, send the 
signature back to the server for verification - e.g. step verification request & Singed 
Object in fig. 3, abstract, paragraph [0036] and [0060] and the server sends 
success/failure indicator to the client after verification - e.g. fig. 3, Bowe et al. does 
not explicitly disclose the client storing both the signature and the data in the 
persistent storage of the client, and evaluating the result; when the result is positive, 
the client using the data; and when the result is negative, the client not using the 
data. However, Jackson et al. met the claimed limitations by disclosing a 
computerized wagering game apparatus in communication with a network server 
and the data received in the game apparatus maybe verified via a digital signature 
employing hashing functions before execution that errors will be caught at the time 
they occur rather than when the data is loaded or reloaded (e.g. fig. 2, col. 7, line 67 
- col. 8, line 6. Please note computerized wagering game apparatus corresponds to 
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Applicant's client and before execution to catch error corresponds to Applicant's 
evaluating the result, when the result is positive, the client using the data and when 
the result is negative, the client not using the data ) and the data and signature are 
then stored on hard drive, CD-ROM, flash disk (e.g. col. 11, lines 20 - 22. Please 
note hard drive, CD-ROM and flash disk correspond to Applicant's persistent 
storage). 

Bowe et al. - Jackson et al. are analogous art because they are from a similar 
field of endeavor in using digital signature to verify data in a client-server 
environment. Thus, it would have been obvious to a person with ordinary skill in 
the art, at the time of invention, to combine the teachings of Jackson's the client 
storing both the signature and the data in the persistent storage of the client, and 
evaluating the result; when the result is positive, the client using the data; and 
when the result is negative, the client not using the data with Bowe et al. The 
motivation of doing so would have been to advantageously read/write, yet retains 
information stored upon power down and to improve or ensure security (e.g. 
Jackson et al. - col. 1, lines 18 -20 and col. 9, lines 50-52). 

As per claim 2, Bowe et al. - Jackson et al. discloses the method as 
applied above in claim 1 . Bowe et al. further discloses wherein the first data related 
information is the same as the data (data object and document to the server - e.g. 
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paragraph [0054]. Please note data object and document correspond to Applicant's 
first data related information and data). 



As per claim 5, Bowe et al. - Jackson et al. discloses the method as 
applied above in claim 1 . Bowe further discloses wherein the first data related 
information comprises a digest of the data calculated by the client using a one-way 
hash function and the data (The server creates a signature by performing a hash 
function on the data object - e.g. paragraph [0037]), and the second data related 
information comprises a digest of the stored data calculated by the client using a 
one-way hash function and the stored data (Server generates second hash in fig. 3 
and paragraph [0060]). 



As per claim 8, Bowe et al. - Jackson et al. discloses the method as 
applied above in claim 5. Bowe further discloses wherein the first data related 
information further comprises: a signer identification (SID) for the client, the SID 
uniquely identifying the client and not being controlled by an operator of the client 
(The signature property field contains a client identifier - e.g. paragraph [0039]. 
Please note client identifier corresponds to Applicant's signer identification (SID)). 



As per claim 19, Bowe et al. - Jackson et al. disclose method of steps as 
applied above in claim 1 . Therefore, Bowe et al. - Jackson et al. Idiscloses the 
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claimed machine readable instructions stored on a memory medium for carrying out 
the method of steps. 

Allowable Subject Matter 

1 1 . Claims 11 and 14 would be allowable if rewritten to overcome the claim 
objections, set forth in this Office action and to include all of the limitations of the base 
claim and any intervening claims. 

Conclusion 

12. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

> Schneier et al. (U.S. Pub. No. 20020002076) discloses method and 
apparatus for securing electronic games 

> Nguyen et al. (U.S. Pub. No. 200201 1 661 5) teaches gaming machine 
securely communicates with device over a public network (i.e. Internet) 

> Walker et al. (U.S. Pub. No. 20030060286) discloses remote gaming method 
and apparatus 

> Howard (U.S. Pub. No. 20030167407) teaches providing authentication of 
files downloaded from a source to an embedded system 

> Chang et al. (U.S. Pub. No. 20030145237) discloses establish a secure 
connection for each of the multiple users between the client computer and the 
server computer 
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> Newcombe (U.S. Patent No. 7,409,061) teaches a Game Security Facility 
associated with a game server is used to manage secure communication with 
game clients 
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Contact Information 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to APRIL Y. SHAN whose telephone number is (571)270- 
1014. The examiner can normally be reached on Monday - Friday, 8:00 a.m. - 5:00 
p.m., EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Y. Vu can be reached on (571) 272-3859. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/April Y Shan/ 
Examiner, Art Unit 2435 
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